testreponame/malicious

Release historydanger

The package has only one release, published about 4 years and 9 months ago, with no releases in the last 12 months; this is strong evidence of abandonment risk.

Repo package mentiondanger

The linked repository name does not match the package name and its README does not mention the package, creating a concrete concern that the repository may not actually belong to this release.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and leaving current maintenance capacity un demonstrated.

Repo popularitycaution

The repository has 0 stars and 0 forks, with 1 watcher. Popularity is only supporting evidence, but these counters provide no additional evidence of an active user or maintainer community.

Security policycaution

No security policy was found in the repository. This is a maintenance and disclosure gap, though the package has no install-time lifecycle scripts to increase immediate execution risk.